Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File:                     B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier:          YJ0MLxY5fIgjnPg9fMQlLgx3W+pjYgngfU7tlCyNdUQ=
Subject key identifier:   AB:A1:15:B4:B6:57:39:F2:9D:00:13:FF:6D:25:95:5E:B5:7F:A0:4C
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer:       /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial:       610877905E1EBAFC25EF43EEB644A1E00E9FAAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number:          0304
Signing time:             Tue 12 May 2026 07:10:30 +0000
Manifest this update:     Tue 12 May 2026 07:05:30 +0000
Manifest next update:     Wed 13 May 2026 09:35:30 +0000
Files and hashes:         1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: EJA02pKS2JzUv6JzBKhYLNg7AqmsiXl3bKvi4M99Ro4=)
                          2: AS215956.asa (hash: kHwGT6W13DtENkYxn2AkGd1xDdgYZ4IEtlIsMSuw4rU=)
                          3: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 9LWLJC/CS8sOfArHPeCb8VXjodevg9GVDezV1/woQjw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 09:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:08:77:90:5e:1e:ba:fc:25:ef:43:ee:b6:44:a1:e0:0e:9f:aa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
        Validity
            Not Before: May 12 07:05:30 2026 GMT
            Not After : May 13 09:35:30 2026 GMT
        Subject: CN=ABA115B4B65739F29D0013FF6D25955EB57FA04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:5f:11:00:58:ce:72:d6:53:5b:64:08:07:
                    a2:c1:60:b0:97:83:a8:47:bc:5d:3a:20:66:74:2d:
                    05:4a:ac:fe:96:ca:fd:6c:a1:61:c5:53:19:87:a7:
                    f3:28:04:fa:ef:f5:e2:36:38:c7:cc:91:1c:ae:07:
                    09:31:0c:95:63:51:9b:59:5b:fb:02:56:97:8b:12:
                    c5:76:11:f5:b2:87:57:71:89:d2:c5:ef:6b:3e:41:
                    96:86:5b:16:b0:bc:93:19:62:23:fa:a9:84:d9:c9:
                    5f:c3:8b:58:fa:92:6f:34:4d:9d:ff:b2:b5:48:c6:
                    6a:3d:c6:67:4c:32:3c:8e:ec:1c:56:ac:c8:09:53:
                    61:ba:f9:ac:84:a4:6f:d2:3c:3f:df:48:59:4c:2e:
                    89:9f:37:6a:06:80:c0:71:2a:0a:df:b0:62:d4:81:
                    3f:dc:ac:26:ba:2f:bf:18:0e:71:c2:c3:8a:d9:20:
                    c5:85:ad:51:5d:33:3a:5b:a5:df:22:ad:4f:72:76:
                    12:54:14:e2:5f:5e:2f:aa:af:6a:c6:66:7d:77:97:
                    76:06:9f:37:25:ff:52:60:23:35:1d:59:d5:32:27:
                    25:ae:bb:86:cc:8f:0c:6b:c8:87:12:ad:2f:36:a0:
                    d3:cb:29:68:dd:27:ef:9d:e8:1f:ec:9e:5c:58:8b:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A1:15:B4:B6:57:39:F2:9D:00:13:FF:6D:25:95:5E:B5:7F:A0:4C
            X509v3 Authority Key Identifier:
                keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:96:15:98:0f:35:fc:fc:4f:57:0e:30:02:da:ca:88:3f:5e:
         cd:00:2b:cf:0c:96:9d:c6:94:7f:66:63:b7:fd:9d:eb:f5:ad:
         eb:df:73:e3:d4:15:63:51:d8:65:20:47:0b:79:cf:91:9c:0d:
         eb:15:15:0e:f4:74:3d:a2:20:f4:cd:fe:7f:94:83:b1:5b:c7:
         1e:95:15:a7:35:de:1b:20:4e:72:89:d7:ba:7f:20:21:c6:9d:
         79:ba:33:26:30:f2:eb:f4:92:2c:77:30:dd:f6:7e:4f:68:f4:
         bb:f5:83:5c:78:fe:15:5f:2f:fc:6e:16:7c:83:1a:4a:af:a8:
         07:4b:7d:50:95:d3:ff:87:51:83:f7:5c:dd:1b:52:82:17:3e:
         e7:f4:1e:5a:b4:32:5a:d9:b3:5a:dc:c4:52:f8:c1:b6:59:72:
         54:0c:7a:52:59:d3:84:81:12:61:27:ca:68:a2:cb:a2:38:27:
         00:b5:4b:05:9c:00:fb:b2:ad:f8:f6:b8:2f:a6:b9:5f:f7:c0:
         75:88:ff:f0:38:cb:af:68:b4:e7:f6:28:93:76:88:cf:8e:46:
         51:30:bc:c5:b0:0c:c0:a0:ad:5d:4e:f6:e0:1a:e6:eb:a8:df:
         1b:ce:7f:3a:c4:89:6b:f5:72:4c:51:61:27:15:82:79:8d:99:
         f1:e4:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:03 2026 by rpki-client